{"id":118362,"date":"2020-09-03T06:00:25","date_gmt":"2020-09-03T13:00:25","guid":{"rendered":"https:\/\/www.paloaltonetworks.com\/blog\/?p=118362"},"modified":"2020-09-03T08:32:26","modified_gmt":"2020-09-03T15:32:26","slug":"secops-executive-culture","status":"publish","type":"post","link":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/2020\/09\/secops-executive-culture\/","title":{"rendered":"How Executive Culture Can Compromise Your Security"},"content":{"rendered":"

Dear Executive,\u00a0<\/span><\/p>\n

Last night, your company was breached, and it was potentially you who allowed that to happen.\u00a0\u00a0<\/span><\/p>\n

\u201cHow is this possible?\u201d<\/span><\/i> you say. \u201c<\/span>I spent the money. I hired the people. I bought [insert flavor-of-the-year security solution]. I attended the conferences and went to the classes.<\/span><\/i> We were locked down!\u201d<\/span><\/i><\/p>\n

Your manifold millions of dollars of security solutions and personnel were subverted in a savvy feat of technomancy by threat actors and, instead of some new zero day, they exploited a CVE from 2019. The reason they could had everything to do with your corporate culture.<\/span><\/p>\n

\u201cBut we have great corporate culture! Our people are happy and enthusiastic!\u201d\u00a0<\/span><\/i><\/p>\n

While that is a valuable advantage for a company to have, through action \u2013 or inaction \u2013 leaders frequently also create a culture of intimidation and reluctance to innovate and speak out in their organizations. This happens by fostering a focus on delivering the <\/span>production objectives<\/b> of leadership at <\/span>all costs<\/b>. When security hygiene is not held in the same reverence as production, it creates an atmosphere where maintaining production levels dominates and the drive to stay secure surrenders to fear.<\/span><\/p>\n

TL;DR: People stop innovating when they fear retaliation.\u00a0\u00a0\u00a0\u00a0<\/span><\/p>\n

 <\/p>\n

Does This Sound Familiar?<\/span><\/h2>\n